Part 6 of this project

Registration

Validate customer accounts and store password hashes.

Goal

This snapshot advances Rivergate Market by teaching you to validate customer accounts and store password hashes.

Every numbered folder is a complete app. Run this stage independently, then compare it with the previous folder.

Prerequisites

Use .NET 8 SDK and Docker for Postgres stages.

Port 5082 must be free. Copy .env.example before database stages.

  • .NET 8 SDK
  • A code editor and terminal
  • Docker from part 4 onward

Concepts

Registration normalizes email, enforces uniqueness, hashes passwords, signs the user in, and regenerates the session.

Razor Pages keep handlers close to markup; cookie auth owns the session; EF Core persists catalog and orders.

Walkthrough

Build a registration form with CSRF-safe posts and validation errors.

Read the example, then open the matching snapshot. The repository includes validation, CSRF, and the surrounding structure.

user.PasswordHash = hasher.HashPassword(user, input.Password);
db.Users.Add(user); await db.SaveChangesAsync();
await HttpContext.SignInAsync(...);

Run and verify

Enter 06-Registration, copy .env.example, restore, migrate, and dotnet run on port 5082.

Open http://127.0.0.1:5082. From data lessons onward, Ada and Grace use password123.

docker compose up -d
git clone https://github.com/michaeldunga1/fcc-aspnet-ecommerce.git
cd fcc-aspnet-ecommerce/06-Registration
cp .env.example .env
dotnet restore
dotnet ef database update
dotnet run --urls http://0.0.0.0:5082

Troubleshooting

Duplicate email and password confirmation failures should redisplay field errors.

For database failures, confirm Docker and the river_NN name. Never commit .env, bin/, obj/, or secrets.

  • Read the first exception first
  • Rebuild assets after Tailwind class changes
  • Never commit secrets

Try this

Try a short password, mismatched confirmation, and a duplicate email.

Test a happy path and one invalid or unauthorized request.

  • Make one small change
  • Test it in the browser
  • Compare with the next snapshot only after it works